This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30438/jaq3NK_v5e8W0Ja7RmFoXt4XdjM.roa
File: jaq3NK_v5e8W0Ja7RmFoXt4XdjM.roa (raw, json)
Hash identifier: vFA2FoseJGbAi/rbPScaYFrLHhBQuQJ5Ey0W6Z8X3/s=
Subject key identifier: 8D:AA:B7:34:AF:EF:E5:EF:16:D0:96:BB:46:61:68:5E:DE:17:76:33
Certificate issuer: /CN=BF791915BC4356AAB7A6EFCD6393E1930B502728
Certificate serial: 17
Authority key identifier: BF:79:19:15:BC:43:56:AA:B7:A6:EF:CD:63:93:E1:93:0B:50:27:28
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/v3kZFbxDVqq3pu_NY5PhkwtQJyg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30438/jaq3NK_v5e8W0Ja7RmFoXt4XdjM.roa
Signing time: Sun 25 Jan 2026 20:43:43 +0000
ROA not before: Sun 25 Jan 2026 20:43:43 +0000
ROA not after: Fri 15 Jan 2027 01:30:02 +0000
asID: 152860
IP address blocks: 2401:a920::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30438/v3kZFbxDVqq3pu_NY5PhkwtQJyg.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30438/v3kZFbxDVqq3pu_NY5PhkwtQJyg.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/v3kZFbxDVqq3pu_NY5PhkwtQJyg.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Feb 2026 11:48:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23 (0x17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BF791915BC4356AAB7A6EFCD6393E1930B502728
Validity
Not Before: Jan 25 20:43:43 2026 GMT
Not After : Jan 15 01:30:02 2027 GMT
Subject: CN=8DAAB734AFEFE5EF16D096BB4661685EDE177633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:23:84:c4:9f:98:b3:46:00:1c:d4:24:69:b5:
bc:bb:b5:42:eb:22:9d:3e:d1:8d:39:d8:e6:e7:52:
6d:cd:54:6b:16:9a:3a:be:80:d8:fc:75:55:aa:6e:
12:ce:25:0c:bf:7d:3e:ca:90:38:00:6f:67:ff:76:
93:ed:74:b6:72:8f:42:a9:6f:66:bb:b3:3f:34:21:
35:93:71:48:42:37:a1:52:c9:df:86:7d:30:65:9d:
b8:74:fa:92:cd:79:e8:38:cf:97:fa:38:60:c5:f0:
55:da:4b:74:8e:77:84:ec:42:aa:e7:50:e5:a9:b4:
18:9b:b1:c7:19:fc:c9:b6:b0:63:29:64:89:8a:c2:
66:6c:0f:e1:8c:70:d9:f6:f6:c6:43:02:5a:dc:ae:
bf:83:65:fd:4e:c4:1d:36:4e:f5:e0:89:46:b1:1c:
e6:b4:ce:b4:23:40:20:b9:ad:46:17:42:c2:49:a9:
fa:a7:1c:68:b3:09:8e:e6:b0:bd:ba:c3:a1:40:37:
c3:45:1f:d7:de:09:96:be:70:a2:d0:e8:82:5a:59:
c2:84:7c:95:17:9a:97:4b:07:e4:5a:9d:42:4f:ff:
05:fc:c3:ec:d4:ac:86:c1:53:66:3f:e2:da:b1:1d:
e4:98:38:30:19:4e:d3:9a:aa:36:3a:64:24:13:4d:
8e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:AA:B7:34:AF:EF:E5:EF:16:D0:96:BB:46:61:68:5E:DE:17:76:33
X509v3 Authority Key Identifier:
keyid:BF:79:19:15:BC:43:56:AA:B7:A6:EF:CD:63:93:E1:93:0B:50:27:28
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30438/v3kZFbxDVqq3pu_NY5PhkwtQJyg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/v3kZFbxDVqq3pu_NY5PhkwtQJyg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30438/jaq3NK_v5e8W0Ja7RmFoXt4XdjM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:a920::/32
Signature Algorithm: sha256WithRSAEncryption
7c:21:e0:84:55:ee:cf:05:bb:89:34:d4:32:bb:a5:b8:e8:34:
10:26:0a:26:54:56:dc:be:81:11:9a:64:15:25:7b:f4:67:b4:
10:dd:6b:06:71:a5:a6:3b:d7:4d:2d:8c:b9:74:2f:91:a2:71:
6b:c2:63:63:f0:ab:f6:00:ba:55:d7:8e:9a:ad:9b:de:0a:e7:
eb:ef:00:d1:6a:e6:5b:ff:be:3a:82:38:7a:b9:42:be:30:e1:
25:ea:0e:9e:da:26:aa:c9:63:fc:4b:ea:44:2b:6d:22:4b:78:
af:5a:23:16:d9:40:93:f8:15:73:65:16:0a:ae:73:f0:d6:e6:
09:2b:4e:5f:a8:c7:cf:ce:a6:0e:eb:d3:00:75:a6:39:00:9b:
3f:34:11:4e:18:b5:61:6b:00:50:2b:b9:f2:71:2e:f7:f1:b4:
16:f7:fc:b5:8c:2d:48:a4:3a:ca:69:b1:22:1a:d7:55:22:f6:
8b:98:37:34:50:6d:66:0a:27:0b:69:30:57:cd:10:4b:84:d6:
35:06:7e:6b:df:0e:6d:a1:9b:1e:dc:df:28:ca:b3:49:5f:7a:
11:de:9c:45:59:91:04:73:f6:32:9e:6a:bd:66:18:93:b9:a0:
0e:2a:01:65:14:9d:cb:e3:56:0d:fc:ea:ce:a6:9b:90:35:2c:
ab:16:2e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 7 13:47:31 2026 by rpki-client